Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d74732-c163-4c64-adb2-9585231d0226/1/FFHSprpEa5Qy7SDSyd9XtAs70uo.mft
File: FFHSprpEa5Qy7SDSyd9XtAs70uo.mft (raw, json)
Hash identifier: vFiIEE5baP+Te2N71SsMsZufXirBDnEh1ZFBj/1GNXs=
Subject key identifier: 8C:3A:C7:B4:05:07:1B:D3:18:A9:82:3E:F5:96:4E:FC:A3:A0:66:7E
Authority key identifier: 14:51:D2:A6:BA:44:6B:94:32:ED:20:D2:C9:DF:57:B4:0B:3B:D2:EA
Certificate issuer: /CN=1451d2a6ba446b9432ed20d2c9df57b40b3bd2ea
Certificate serial: 01831B8864C6EFD3978CA6D70151AE3E1569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFHSprpEa5Qy7SDSyd9XtAs70uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d74732-c163-4c64-adb2-9585231d0226/1/FFHSprpEa5Qy7SDSyd9XtAs70uo.mft
Manifest number: 0AA3
Signing time: Thu 08 Sep 2022 05:17:46 +0000
Manifest this update: Thu 08 Sep 2022 05:17:46 +0000
Manifest next update: Fri 09 Sep 2022 05:17:46 +0000
Files and hashes: 1: FFHSprpEa5Qy7SDSyd9XtAs70uo.crl (hash: Q6djRdWki6pzh8akKz85UDuiql8JgGdc0zg2VXLk7iY=)
2: wfin0Sj1kVc2QXYAEtC1lstgaIs.roa (hash: bn7+xleKOAMWIRQEbqQqeRwghCEgGeYWhGcnCWiZa+8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1b:88:64:c6:ef:d3:97:8c:a6:d7:01:51:ae:3e:15:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1451d2a6ba446b9432ed20d2c9df57b40b3bd2ea
Validity
Not Before: Sep 8 05:17:46 2022 GMT
Not After : Sep 9 05:17:46 2022 GMT
Subject: CN=8c3ac7b405071bd318a9823ef5964efca3a0667e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ed:a1:66:07:5b:8c:3c:89:83:dd:ba:12:71:
99:c9:51:f2:2a:54:39:3a:81:35:50:37:88:f9:68:
19:ee:f5:28:0e:11:d7:29:18:77:52:0c:78:e9:51:
25:b9:bf:30:de:3f:85:75:8c:4e:80:bc:21:4b:dd:
3f:0b:07:ea:26:4d:2c:5e:92:e8:dc:15:67:1a:52:
0d:e7:16:2a:4e:20:4e:09:5e:42:2b:6b:78:fa:37:
81:0f:d9:5b:d7:92:6a:c5:8f:5e:3c:a5:f0:6a:7a:
08:76:80:31:ce:c0:6c:4c:24:eb:27:b4:d6:57:54:
56:de:85:a3:04:87:18:5c:81:43:e1:1e:a2:a0:9a:
a0:3c:a8:a2:2e:f5:a9:00:aa:b1:7e:33:04:55:01:
14:82:6f:da:59:ce:2c:50:35:8b:47:b1:b9:25:67:
80:3d:27:12:f4:d4:20:e2:5e:ba:b6:86:45:ed:db:
b5:c3:dd:6d:03:07:d8:6f:37:66:3b:ee:34:cd:6a:
84:1c:35:d2:19:fd:f6:93:1d:43:06:f5:98:fe:ee:
c9:5b:2b:9b:bf:b0:cc:94:52:14:f3:f4:c3:29:63:
ec:05:bf:8e:54:80:92:25:d5:e9:44:f5:96:f6:8b:
66:e2:05:06:2e:17:59:15:5a:a5:4f:14:37:12:6a:
7b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3A:C7:B4:05:07:1B:D3:18:A9:82:3E:F5:96:4E:FC:A3:A0:66:7E
X509v3 Authority Key Identifier:
keyid:14:51:D2:A6:BA:44:6B:94:32:ED:20:D2:C9:DF:57:B4:0B:3B:D2:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFHSprpEa5Qy7SDSyd9XtAs70uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d74732-c163-4c64-adb2-9585231d0226/1/FFHSprpEa5Qy7SDSyd9XtAs70uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d74732-c163-4c64-adb2-9585231d0226/1/FFHSprpEa5Qy7SDSyd9XtAs70uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a2:5d:42:08:c2:d9:f4:2b:83:40:e6:54:a8:da:3f:a6:c6:
80:1a:39:a6:d4:5f:1a:00:d7:30:de:6d:38:36:91:2e:53:b5:
27:bd:20:9e:7a:82:01:95:85:54:34:e3:26:e7:d2:cf:bb:b9:
f1:3b:de:f4:fb:5d:78:ad:04:9b:d7:25:37:5b:95:36:82:54:
06:f3:e2:f8:24:fa:70:90:ae:92:b3:24:c7:cb:4f:6c:93:d8:
64:3f:48:95:a3:48:8e:0d:bc:eb:13:c4:c5:b7:2f:7b:43:80:
2b:b7:7c:b9:8e:b2:df:a8:58:f5:15:bf:9e:3c:73:9a:26:32:
d1:b0:7a:e1:89:f3:8d:3e:f3:c0:65:40:9b:0d:14:75:54:aa:
d7:b2:6e:bb:ef:3c:a5:a8:f0:a5:3d:36:21:c8:36:53:25:6a:
d7:11:65:1e:d7:8f:db:fa:fa:f1:e5:80:94:cb:06:30:20:ab:
a4:5f:8e:cc:72:fc:75:bb:53:8f:b4:a2:ce:98:d3:25:b3:51:
49:67:fa:bd:82:ca:52:c5:19:54:b4:00:c5:fd:82:4c:0f:83:
40:94:0c:de:e8:22:99:f8:80:40:9a:bb:a2:0b:c8:cd:21:35:
3c:28:33:bd:1d:f0:1d:07:c4:a0:9c:01:11:b1:f1:61:fa:77:
2e:32:9f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:27 2025 by rpki-client